Title

Microsoft Windows Secure Boot Security Bypass Vulnerability (MS16-140) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Windows Secure Boot. To exploit this vulnerability, an attacker would either gain administrative privileges or physical access to a target device to install an affected policy. If successfully exploited, this vulnerability would allow an attacker to bypass the Secure Boot Integrity Validation for BitLocker and the Device Encryption security feature.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-72539

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.